Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:46494
HistoryApr 18, 2024 - 5:19 a.m.

Open Redirect

2024-04-1805:19:04
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
spring-web
open redirect
url validation
ssrf_attack
vulnerability

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

org.springframework: spring-web is vulnerable Open Redirect. The vulnerability is caused due to improper validation checks on the host of the parsed URL, which could lead to potential SSRF attacks if the URL is utilized post-validation.

Related

redhatcve 1
ibm 9
atlassian 2
openvas 2
debiancve 1
cvelist 1
cve 1
osv 2
github 1
ubuntucve 1
nvd 1
redhatcve
redhatcve
CVE-2024-22262
2024-04-16 10:22:09
ibm
ibm
Security Bulletin: IBM Sterling Connect:Direct for Microsoft Windows is vulnerable to multiple issues due to VMware Tanzu Spring
2024-06-12 09:25:41
Security Bulletin: Vulnerability in Spring Framework affects IBM Tivoli Application Dependency Discovery Manager (CVE-2024-22259, CVE-2024-22243, CVE-2024-22262).
2024-05-23 15:35:34
Security Bulletin: IBM Observability with Instana for Synthetic PoP is affected by Multiple Security Vulnerabilities
2024-05-13 14:38:46
atlassian
atlassian
SSRF (Server-Side Request Forgery) org.springframework:spring-web Dependency in Bitbucket Data Center and Server
2024-05-10 10:10:53
SSRF (Server-Side Request Forgery) org.springframework:spring-web Dependency in Confluence Data Center and Server
2024-06-12 18:10:45
openvas
openvas
VMware Spring Framework < 5.3.34, 6.0.x < 6.0.19, 6.1.x < 6.1.6 SSRF Vulnerability - Windows
2024-04-11 00:00:00
VMware Spring Framework < 5.3.34, 6.0.x < 6.0.19, 6.1.x < 6.1.6 SSRF Vulnerability - Linux
2024-04-11 00:00:00
debiancve
debiancve
CVE-2024-22262
2024-04-16 06:15:46
cvelist
cvelist
CVE-2024-22262 CVE-2024-22262: Spring Framework URL Parsing with Host Validation
2024-04-16 05:54:12
cve
cve
CVE-2024-22262
2024-04-16 06:15:46
osv
osv
Spring Framework URL Parsing with Host Validation
2024-04-16 06:30:28
CVE-2024-22262
2024-04-16 06:15:46
github
github
Spring Framework URL Parsing with Host Validation
2024-04-16 06:30:28
ubuntucve
ubuntucve
CVE-2024-22262
2024-04-16 00:00:00
nvd
nvd
CVE-2024-22262
2024-04-16 06:15:46

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON
Related for VERACODE:46494
redhatcve1ibm9atlassian2openvas2debiancve1cvelist1cve1osv2github1ubuntucve1nvd1